Backup and Recovery

RMAN supports three encryption modes:

• Transparent mode

• Password mode

• Dual mode

In this recipe, you're going to learn to create encrypted backups using RMAN.

How to do it...

1. Connect to the RMAN as user who has the sysbackup privilege:

   $ rman target '"zoran@orcl as sysbackup"'
   

2. Configure encryption on a database level:

   RMAN> CONFIGURE ENCRYPTION FOR DATABASE ON;
   

3. Backup a tablespace example in transparent mode:

   RMAN> BACKUP TABLESPACE EXAMPLE tag 'tran_mode';
   

4. Enable dual mode encryption and backup tablespace example in dual mode:

   RMAN> SET ENCRYPTION ON IDENTIFIED BY "password_1";RMAN> BACKUP TABLESPACE EXAMPLE tag 'dual_mode';
   

5. Enable password mode and backup tablespace example in password mode:

   RMAN> SET ENCRYPTION ON IDENTIFIED BY "password_2" ONLY;
   RMAN> BACKUP TABLESPACE EXAMPLE tag 'pass_mode';
   

There's more...

If a backup is created in transparent mode, it can be restored only by using a key that is used to create the backup (stored in the external keystore...